Re: [pfSense Support] 0.73.6-WRAP board

2005-08-05 Thread Giorgio Ducci
Uhmm, I see what you mean. Well, I tried with WRAP 2C and the trick is: - configure as normal, with LAN as ethernet nic and WAN as wireless; - give an IP address to both in the same network; - bridge LAN and WAN, you have to change IP because as soon you save the GUI is disconnected...after that

[pfSense Support] Captive Portal Problems 0.73.6

2005-08-05 Thread Paul Taylor
I'm not sure what's going on, but every time we enable the Captive Portal in 0.73.6 (and older versions we were trying yesterday), the WebGUI starts to hang. Just after enabling it (with Local User Manager being the only setting not at the default value), the WebGUI responds and states that the

[pfSense Support] FreeRadius Package - slight security issue

2005-08-05 Thread Paul Taylor
While looking through the config.xml file to see if I could spot anything unusual (to help me fix the last issue I posted about), I noticed the FreeRadius config... The problem that I saw is that the passwords are stored in clear text. I would think that the passwords should be at

[pfSense Support] Resend: Problem with SQUID install

2005-08-05 Thread Jason Landry
Note: I'm resending this because I'm not sure it actually got through the first time. Been having that problem with gmail on occassion. Currently running 0.73.6 I've actually had this same problem since 68.x, but have just not reported it. If I try to install squid, i get the following:

Re: [pfSense Support] FreeRadius Package - slight security issue

2005-08-05 Thread Bill Marquette
On 8/5/05, Paul Taylor [EMAIL PROTECTED] wrote: While looking through the config.xml file to see if I could spot anything unusual (to help me fix the last issue I posted about), I noticed the FreeRadius config... The problem that I saw is that the passwords are stored in clear text. I

Re: [pfSense Support] FreeRadius Package - slight security issue

2005-08-05 Thread Scott Ullrich
Contact the authors of freeradius then. This setup would be no different from freebsd in the back of your room running the same configuration! On 8/5/05, Paul Taylor [EMAIL PROTECTED] wrote: While looking through the config.xml file to see if I could spot anything unusual (to

RE: [pfSense Support] FreeRadius Package - slight security issue

2005-08-05 Thread Paul Taylor
Bill, Well, yes, I realize that base64encoding doesn't provide much in the way of security... But it's better than the data being completely in the clear... I have some encryption/decryption code around here somewhere that could probably be used, but of course the key would have to be

Re: [pfSense Support] Captive Portal Problems 0.73.6

2005-08-05 Thread Scott Ullrich
If this is happening then your hitting some big giant locked area of the freebsd kernel. I haven't personally seen this issue but I have noticed that sometimes during filter reload operations the console keyboard stops responding which reminds me of your issue. Just a complete guess. Scott On

Re: [pfSense Support] FreeRadius Package - slight security issue

2005-08-05 Thread Bill Marquette
On 8/5/05, Paul Taylor [EMAIL PROTECTED] wrote: Bill, Well, yes, I realize that base64encoding doesn't provide much in the way of security... But it's better than the data being completely in the clear... I have some encryption/decryption code around here somewhere that could

Re: [pfSense Support] FreeRadius Package - slight security issue

2005-08-05 Thread Scott Ullrich
Not to mention I have to stress that this is no different from running free-radius in a non pfSense environment. Your real beef is with the freeradius authors, not us. Scott On 8/5/05, Bill Marquette [EMAIL PROTECTED] wrote: On 8/5/05, Paul Taylor [EMAIL PROTECTED] wrote: Bill,

RE: [pfSense Support] FreeRadius Package - slight security issue

2005-08-05 Thread Paul Taylor
Bill, Sure, if someone gets a hold of the config.xml file, no amount of base64encoding will stop them from getting a password.. But, if someone is in the same room with you looking over your shoulder while you are looking through the config.xml file, there is no need to give them a clear view of

Re: [pfSense Support] FreeRadius Package - slight security issue

2005-08-05 Thread Scott Ullrich
This whole argument is pointless. If this is really this big of a problem you have these choices: 1. Dont use freeradius and use a seperate server where you will be entering these configs in _PLAIN TEXT_ as well. 2. Dont use pfSense Scott On 8/5/05, Paul Taylor [EMAIL PROTECTED] wrote:

Re: [pfSense Support] FreeRadius Package - slight security issue

2005-08-05 Thread Bill Marquette
Get a privacy screen for your monitor. Or get a mirror for the monitor so you can see the corporate spies. Or retrieve the config file via status.php which will sanitize the passwords. Masking the passwords w/ base64 doesn't solve the problem and we will _NOT_ implement a half assed solution.

RE: [pfSense Support] FreeRadius Package - slight security issue

2005-08-05 Thread Paul Taylor
I didn't mean this to be any sort of argument, but you seem to be taking it as a personal attack... I was just pointing out something that I thought could be an issue. If you don't agree about this being an issue, that's fine.. Leave things the way they are, I'll cope.. I was just trying to

[pfSense Support] Hackathon time!

2005-08-05 Thread Scott Ullrich
Sorry for cross posting but I wanted to make everyone aware that the lists will be going offline for the weekend as the developers hackathon is starting today. Please hold all bug reports, etc until after monday of next week. Would also like to thank everyone that has donated to the hackathon.